post not get, value password